f5efde770e56d4ed30e9648d01efd7b2_JaffaCakes118 | Triage

Sharing

General

Target

f5efde770e56d4ed30e9648d01efd7b2_JaffaCakes118
Size

47KB
MD5

f5efde770e56d4ed30e9648d01efd7b2
SHA1

327456a15b71669219e75e9d6dc5f175ae11c296
SHA256

893b540f460c9557cd5391bd747122becbc8d487a1dd16668f5ed5922a374d4e
SHA512

084f41dc3007fd9ebc0118319678a5805ea1679adb14286849598bc2d4cee8cb96c41326e68717a0c2d6b4f4f53ab3ee6246ff20f2eab1b919d44f7984bd7c3d
SSDEEP

768:PkHPM4oM5sj9E/x+gKUsGQ6p7HQgxy7p/8CRHKxm9ubbALHjexke6Fcv7D2F6H:Pk0hM5ea/xcGQ6+s0/8wHZwbbAOkeEmn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f5efde770e56d4ed30e9648d01efd7b2_JaffaCakes118

Files

f5efde770e56d4ed30e9648d01efd7b2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6aa1bc9fe21c6fd1961695a05fc92b9d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__set_app_type
_except_handler3
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_controlfp
_exit

kernel32

WaitForMultipleObjectsEx
VirtualProtect
PeekNamedPipe
VirtualAlloc
CreateIoCompletionPort
GetLocaleInfoA
GetCurrencyFormatA
GetModuleHandleA
GetStartupInfoA

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ